$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json) Hash identifier: qB1hDE8dLmFNASb6Ou1/Fe2a3EBuCZgO6DqGQZGKAuQ= Subject key identifier: 1D:32:7A:0A:9C:6B:99:45:1D:B8:C3:D9:96:C3:91:0C:E0:6F:61:E6 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584A268AAC25B8AAD8A36166ADB0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 23154 IP address blocks: 148.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:ac:25:b8:aa:d8:a3:61:66:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=1fc17d25-ce42-4523-99db-a22c48222c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:92:9f:99:50:32:98:5d:cb:80:1e:8e:9c: b9:93:2b:64:c6:14:12:c7:55:c7:8f:02:5c:31:00: 55:ca:0c:17:68:a2:73:06:b3:b9:2e:a3:9a:c9:40: 2d:14:61:a5:58:18:1a:0d:5f:04:ee:f9:c6:c0:0e: bb:f8:5a:9c:80:ab:cc:1b:24:1b:45:d7:9a:69:02: 23:5c:e4:20:b7:07:76:68:85:4c:57:73:f0:6c:93: 20:fd:02:5c:42:3d:aa:4e:8a:52:6e:69:fb:48:8e: 2e:05:b5:26:ee:96:5f:33:85:8b:61:3f:89:44:41: 14:0e:cf:b9:46:17:55:6b:df:16:61:3e:69:86:28: c1:f0:2d:0f:ad:27:1e:56:97:2d:4e:dc:da:4c:04: 9a:02:5e:3f:c3:35:ae:42:74:29:d5:87:c6:c5:24: 35:de:39:fb:b6:14:66:2a:96:07:11:03:f4:2a:13: a5:16:8f:e2:92:66:81:60:df:e8:86:20:57:9b:83: ba:8d:c3:78:7e:8f:1b:aa:25:cb:4e:fd:0c:b3:e7: c3:82:5d:fd:87:37:5f:d4:5b:f3:c4:67:f5:2b:28: e0:f0:95:49:6c:5e:2a:ec:74:64:0c:89:80:0a:3e: 20:6b:02:da:47:cd:81:57:eb:fa:cd:2c:bf:c2:70: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:7A:0A:9C:6B:99:45:1D:B8:C3:D9:96:C3:91:0C:E0:6F:61:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a6:a9:80:92:59:59:30:d7:cb:3f:c9:d9:d9:4a:5f:31:43: ef:6c:53:14:fc:f0:16:72:b2:0a:41:c4:72:01:80:ec:e4:8f: 6c:f7:41:36:94:ad:87:88:c3:e7:9b:57:0b:41:15:ca:95:75: 50:f2:cf:56:c8:39:10:4f:0f:c4:dc:8d:85:0a:b5:64:d4:a8: f4:24:58:e9:31:25:d2:ed:4d:e5:f6:ec:f0:0f:e9:18:da:74: 59:00:9c:96:73:29:f0:78:b0:4f:bf:70:92:e2:f0:16:7f:e2: 13:b5:33:da:f2:4c:cf:7f:ed:3f:67:da:22:38:34:0e:70:20: 35:5e:79:fe:73:36:6a:e1:cb:37:6b:a6:67:6c:65:f7:99:f6: db:00:a7:20:f7:e9:15:85:24:52:d7:d1:5e:1b:9e:1a:07:66: d5:25:d0:a4:1f:88:b1:62:e5:ab:8d:f6:65:ed:97:17:10:02: a8:50:50:91:81:b6:51:cb:bc:33:1e:2f:43:49:e4:fc:af:88: 34:ac:90:86:67:62:34:51:ca:25:82:68:b9:da:c2:ea:1f:36: 20:f9:e2:8f:a3:b5:40:10:e6:8d:b5:ca:0b:d8:ed:e1:ad:95: 56:f9:f0:37:ae:4e:4b:ea:c6:03:a2:1c:b0:5a:97:3b:f2:17: a8:ff:4c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiqwluKrYo2FmrbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MWZjMTdkMjUtY2U0Mi00NTIzLTk5ZGItYTIyYzQ4MjIyYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTySn5lQMphdy4Aejpy5kytkxhQSx1XHjwJc MQBVygwXaKJzBrO5LqOayUAtFGGlWBgaDV8E7vnGwA67+FqcgKvMGyQbRdeaaQIj XOQgtwd2aIVMV3PwbJMg/QJcQj2qTopSbmn7SI4uBbUm7pZfM4WLYT+JREEUDs+5 RhdVa98WYT5phijB8C0PrSceVpctTtzaTASaAl4/wzWuQnQp1YfGxSQ13jn7thRm KpYHEQP0KhOlFo/ikmaBYN/ohiBXm4O6jcN4fo8bqiXLTv0Ms+fDgl39hzdf1Fvz xGf1Kyjg8JVJbF4q7HRkDImACj4gawLaR82BV+v6zSy/wnDqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0yegqca5lFHbjD2ZbDkQzgb2HmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACemqYCSWVkw18s/ydnZSl8xQ+9sUxT88BZysgpBxHIBgOzkj2z3QTaU rYeIw+ebVwtBFcqVdVDyz1bIORBPD8TcjYUKtWTUqPQkWOkxJdLtTeX27PAP6Rja dFkAnJZzKfB4sE+/cJLi8BZ/4hO1M9ryTM9/7T9n2iI4NA5wIDVeef5zNmrhyzdr pmdsZfeZ9tsApyD36RWFJFLX0V4bnhoHZtUl0KQfiLFi5auN9mXtlxcQAqhQUJGB tlHLvDMeL0NJ5PyviDSskIZnYjRRyiWCaLnawuofNiD54o+jtUAQ5o21ygvY7eGt lVb58DeuTkvqxgOiHLBalzvyF6j/TMg= -----END CERTIFICATE-----Generated at Tue Jun 17 09:57:39 2025 by rpki-client